CyberICT

CVE-2026-50434

Microsoft · Published July 14, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

Windows Push Notification Information Disclosure Vulnerability. Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

Affected Products

  • Windows Server 2022
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C